3 matches found
Integer Overflow
bcrypt-ruby is vulnerable to Integer Overflow. The vulnerability is due to an integer overflow in the Java BCrypt implementation for JRuby, where the key-strengthening round count is computed as a signed 32-bit integer, and when cost=31, signed integer overflow causes the round count to become...
7.5CVSS5.9AI score0.00228EPSS
SaveExploits0References3Affected Software2
20